Internet Explorer COM CreateObject Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

Internet Explorer Multiple COM Objects Memory Corruption (MS05-037 MS05-038; CVE-2005-1990; CVE-2005-2087)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technologies. There exists a vulnerability in the way Microsoft Internet Explorer instantiates certain COM objects that ar...

Unfixed XSS vulnerability at www.krock1055.com

Security researcher Vinay Katoch, has submitted on 25/10/2009 a cross-site-scripting XSS vulnerability affecting www.krock1055.com, which at the time of submission ranked 4111159 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Internet Explorer DirectAnimation COM Object Memory Corruption (MS06-042; CVE-2006-3638)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technology. The invocation of an ActiveX control is performed by Internet Explorer by internally instantiating a COM objec...

Microsoft Design Tools msdds.dll Memory Corruption (MS05-052; CVE-2005-2127)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on the Component Object Model COM technology. There exists a vulnerability in the Microsoft Design Tools Diagram Surface COM object, an object bundled...

Unfixed XSS vulnerability at www.ky3.com

Security researcher jtfairbank, has submitted on 16/10/2009 a cross-site-scripting XSS vulnerability affecting www.ky3.com, which at the time of submission ranked 52018 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is currently...

Microsoft Windows ATL COM Initialization Code Execution Vulnerability (973525)

This host is missing a critical security update according to Microsoft Bulletin MS09-055. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Adobe Reader 9.1.3 / Acrobat - COM Objects Memory Corruption Remote Code Execution

source: https://www.securityfocus.com/bid/36668/info Adobe Reader and Acrobat are prone to a remote code-execution vulnerability because they fail to properly handle certain COM objects. An attacker can exploit this issue by supplying a malicious PDF file or webpage. Successful exploits may allow...

Adobe Reader 9.1.3 Acrobat - COM Objects Memory Corruption Remote Code Execution

Adobe Reader 9.1.3 Acrobat - COM Objects Memory Corruption Remote Code Execution source: https://www.securityfocus.com/bid/36668/info Adobe Reader and Acrobat are prone to a remote code-execution vulnerability because they fail to properly handle certain COM objects. An attacker can exploit this...

Microsoft Outlook View ActiveX Controls Remote Code Execution (MS09-055; CVE-2009-2493)

ActiveX controls are reusable software components based on Microsoft Component Object Model COM. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in several Microsoft Outlook View ActiveX controls. To trigger this issue, ...

AIX 610000 : U828623

The remote host is missing AIX PTF U828623 which is related to the security of the package devices.pci.00105000.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 610002 : U825639

The remote host is missing AIX PTF U825639 which is related to the security of the package devices.pci.df1000f7.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 610001 : U828506

The remote host is missing AIX PTF U828506 which is related to the security of the package devices.pci.00105000.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 610001 : U828565

The remote host is missing AIX PTF U828565 which is related to the security of the package devices.pci.77102224.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 610000 : U828625

The remote host is missing AIX PTF U828625 which is related to the security of the package devices.pci.77102224.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

Unfixed XSS vulnerability at fc2idmanualen.blog125.fc2.com

Security researcher Jelmer de Hen, has submitted on 29/09/2009 a cross-site-scripting XSS vulnerability affecting fc2idmanualen.blog125.fc2.com, which at the time of submission ranked 33 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/201...

AIX 610002 : U828298

The remote host is missing AIX PTF U828298 which is related to the security of the package devices.pci.00105000.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 610002 : U828313

The remote host is missing AIX PTF U828313 which is related to the security of the package devices.pci.77102224.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

Unfixed XSS vulnerability at www.imeicc5.com

Security researcher jath, has submitted on 17/09/2009 a cross-site-scripting XSS vulnerability affecting www.imeicc5.com, which at the time of submission ranked 23473560 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It is currentl...

Unfixed XSS vulnerability at www.feisheng99.com

Security researcher PlanetCreator, has submitted on 15/09/2009 a cross-site-scripting XSS vulnerability affecting www.feisheng99.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/11/2011. It is...